← Search

Zhifeng Li

36 accepted papers

2026

EffiVMT: Video Motion Transfer via Efficient Spatial-Temporal Decoupled Finetuning

ICLR 2026poster

Recently, breakthroughs in the video diffusion transformer have shown remarkable capabilities in diverse motion generations. As for the motion-transfer task, current methods mainly use two-stage Low-Rank Adaptations (LoRAs) finetuning to obtain better performance. However, existing adaptation-based…

Cited by 0SourceScholar
2026

Enhancing Stability and Fidelity for Zero-Shot TTS with a Multi-Level Evaluator

AAAI 2026technical

Recent advances in zero-shot text-to-speech (TTS), driven by language models, diffusion models and masked generation, have achieved impressive naturalness in speech synthesis. Nevertheless, stability and fidelity remain key challenges, manifesting as mispronunciations, audible noise, and quality deg

Cited by 0SourcePDFScholar
2025

Follow-Your-Click: Open-domain Regional Image Animation via Motion Prompts

AAAI 2025technical

Despite recent advances in image-to-video generation, better controllability and local animation are less explored. Most existing image-to-video methods are not locally aware and tend to move the entire scene. However, human artists may need to control the movement of different objects or regions. A…

Cited by 52SourcePDFScholar
2024

BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIP

CVPR 2024poster

Contrastive Vision-Language Pre-training known as CLIP has shown promising effectiveness in addressing downstream image recognition tasks. However recent works revealed that the CLIP model can be implanted with a downstream-oriented backdoor. On downstream tasks one victim model performs well on cle…

2024

Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images

ICLR 2024poster

Large vision-language models (VLMs) such as GPT-4 have achieved exceptional performance across various multi-modal tasks. However, the deployment of VLMs necessitates substantial energy consumption and computational resources. Once attackers maliciously induce high energy consumption and latency tim…

2024

LanguageBind: Extending Video-Language Pretraining to N-modality by Language-based Semantic Alignment

ICLR 2024poster

The video-language (VL) pretraining has achieved remarkable improvement in multiple downstream tasks. However, the current VL pretraining framework is hard to extend to multiple modalities (N modalities, N ≥ 3) beyond vision and language. We thus propose LanguageBind, taking the language as the bind…

2024

Nearest is Not Dearest: Towards Practical Defense against Quantization-conditioned Backdoor Attacks

CVPR 2024poster

Model quantization is widely used to compress and accelerate deep neural networks. However recent studies have revealed the feasibility of weaponizing model quantization via implanting quantization-conditioned backdoors (QCBs). These special backdoors stay dormant on released full-precision models b…

2023

Towards In-Distribution Compatible Out-of-Distribution Detection

AAAI 2023technical

Deep neural network, despite its remarkable capability of discriminating targeted in-distribution samples, shows poor performance on detecting anomalous out-of-distribution data. To address this defect, state-of-the-art solutions choose to train deep networks on an auxiliary dataset of outliers. Var…

Cited by 2SourcePDFScholar
2022

Boosting Black-Box Attack With Partially Transferred Conditional Adversarial Distribution

CVPR 2022poster

This work studies black-box adversarial attacks against deep neural networks (DNNs), where the attacker can only access the query feedback returned by the attacked DNN model, while other information such as model parameters or the training datasets are unknown. One promising approach to improve atta…

Cited by 49PDFcodeScholar
2022

Hardly Perceptible Trojan Attack against Neural Networks with Bit Flips

ECCV 2022poster

"The security of deep neural networks (DNNs) has attracted increasing attention due to their widespread use in various applications. Recently, the deployed DNNs have been demonstrated to be vulnerable to Trojan attacks, which manipulate model parameters with bit flips to inject a hidden behavior and…

2022

Improving Vision Transformers by Revisiting High-Frequency Components

ECCV 2022poster

"The transformer models have shown promising effectiveness in dealing with various vision tasks. However, compared with training Convolutional Neural Network (CNN) models, training Vision Transformer (ViT) models is more difficult and relies on the large-scale training set. To explain this observati…

2022

Towards Efficient Adversarial Training on Vision Transformers

ECCV 2022poster

"Vision Transformer (ViT), as a powerful alternative to Convolutional Neural Network (CNN), has received much attention. Recent work showed that ViTs are also vulnerable to adversarial examples like CNNs. To build robust ViTs, an intuitive way is to apply adversarial training since it has been shown…

Cited by 52SourcePDFScholar
2022

Triangle Attack: A Query-Efficient Decision-Based Adversarial Attack

ECCV 2022poster

"Decision-based attack poses a severe threat to real-world applications since it regards the target model as a black box and only accesses the hard prediction label. Great efforts have been made recently to decrease the number of queries; however, existing decision-based attacks still require thousa…

2021

A Sketch-Transformer Network for Face Photo-Sketch Synthesis

IJCAI 2021poster

We present a face photo-sketch synthesis model, which converts a face photo into an artistic face sketch or recover a photo-realistic facial image from a sketch portrait. Recent progress has been made by convolutional neural networks (CNNs) and generative adversarial networks (GANs), so that promisi…

Cited by 32SourcePDFScholar
2021

LARNet: Lie Algebra Residual Network for Face Recognition

ICML 2021spotlight

Face recognition is an important yet challenging problem in computer vision. A major challenge in practical face recognition applications lies in significant variations between profile and frontal faces. Traditional techniques address this challenge either by synthesizing frontal faces or by pose in…

Cited by 33SourcePDFScholar
2021

SynFace: Face Recognition With Synthetic Data

ICCV 2021poster

With the recent success of deep neural networks, remarkable progress has been achieved on face recognition. However, collecting large-scale real-world training data for face recognition has turned out to be challenging, especially due to the label noise and privacy issues. Meanwhile, existing face r…

Cited by 154PDFcodeScholar
2021

Target Adaptive Context Aggregation for Video Scene Graph Generation

ICCV 2021poster

This paper deals with a challenging task of video scene graph generation (VidSGG), which could serve as a structured video representation for high-level understanding tasks. We present a new detect-to-track paradigm for this task by decoupling the context modeling for relation prediction from the co…

Cited by 80PDFcodeScholar
2021

Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits

ICLR 2021poster

To explore the vulnerability of deep neural networks (DNNs), many attack paradigms have been well studied, such as the poisoning-based backdoor attack in the training stage and the adversarial attack in the inference stage. In this paper, we study a novel attack paradigm, which modifies model parame…

2021

Winnowing Knowledge for Multi-choice Question Answering

EMNLP 2021finding

We tackle multi-choice question answering. Acquiring related commonsense knowledge to the question and options facilitates the recognition of the correct answer. However, the current reasoning models suffer from the noises in the retrieved knowledge. In this paper, we propose a novel encoding method…

Cited by 11SourcePDFScholar
2020

Boundary-Aware Cascade Networks for Temporal Action Segmentation

ECCV 2020poster

Identifying human action segments in an untrimmed video is still challenging due to boundary ambiguity and over-segmentation issues. To address these problems, we present a new boundary-aware cascade network by introducing two novel components. First, we devise a new cascading paradigm, called Stage…

2020

Sparse Adversarial Attack via Perturbation Factorization

ECCV 2020poster

This work studies the sparse adversarial attack, which aims to generate adversarial perturbations onto partial positions of one benign image, such that the perturbed image is incorrectly predicted by one deep neural network (DNN) model. The sparse adversarial attack involves two challenges, i.e., wh…

2020

Squeeze-and-Attention Networks for Semantic Segmentation

CVPR 2020poster

The recent integration of attention mechanisms into segmentation networks improves their representational capabilities through a great emphasis on more informative features. However, these attention mechanisms ignore an implicit sub-task of semantic segmentation and are constrained by the grid struc…

Cited by 288PDFScholar
2019

Efficient Decision-Based Black-Box Adversarial Attacks on Face Recognition

CVPR 2019poster

Face recognition has obtained remarkable progress in recent years due to the great improvement of deep convolutional neural networks (CNNs). However, deep CNNs are vulnerable to adversarial examples, which can cause fateful consequences in real-world face recognition applications with security-sensi…

Cited by 516PDFScholar
2019

Face Anti-Spoofing: Model Matters, so Does Data

CVPR 2019poster

Face anti-spoofing is an important task in full-stack face applications including face detection, verification, and recognition. Previous approaches build models on datasets which do not simulate the real-world data well (e.g., small scale, insignificant variance, etc.). Existing models may rely on…

Cited by 302PDFScholar
2019

Joint Representation and Estimator Learning for Facial Action Unit Intensity Estimation

CVPR 2019poster

Facial action unit (AU) intensity is an index to characterize human expressions. Accurate AU intensity estimation depends on three major elements: image representation, intensity estimator, and supervisory information. Most existing methods learn intensity estimator with fixed image representation,…

Cited by 41PDFScholar
2019

Occlusion Robust Face Recognition Based on Mask Learning With Pairwise Differential Siamese Network

ICCV 2019poster

Deep Convolutional Neural Networks (CNNs) have been pushing the frontier of face recognition over past years. However, existing CNN models are far less accurate when handling partially occluded faces. These general face models generalize poorly for occlusions on variable facial areas. Inspired by th…

Cited by 303PDFcodeScholar
2018

CosFace: Large Margin Cosine Loss for Deep Face Recognition

CVPR 2018poster

Face recognition has made extraordinary progress owing to the advancement of deep convolutional neural networks (CNNs). The central task of face recognition, including face verification and identification, involves face feature discrimination. However, the traditional softmax loss of deep CNNs usual…

Cited by 3386SourcePDFScholar
2018

Orthogonal Deep Features Decomposition for Age-Invariant Face Recognition

ECCV 2018poster

As facial appearance is subject to significant intra-class variations caused by the aging process over time, age-invariant face recognition (AIFR) remains a major challenge in face recognition community. To reduce the intra-class discrepancy caused by aging, in this paper we propose a novel approach…

Cited by 165SourcePDFScholar
2017

Detecting Faces Using Inside Cascaded Contextual CNN

ICCV 2017poster

Deep Convolutional Neural Networks (CNNs) achieve substantial improvements in face detection in the wild. Classical CNN-based face detection methods simply stack successive layers of filters where an input sample should pass through all layers before reaching a face/non-face decision. Inspired by th…

Cited by 105PDFScholar
2017

Range Loss for Deep Face Recognition With Long-Tailed Training Data

ICCV 2017poster

Deep convolutional neural networks have achieved significant improvements on face recognition task due to their ability to learn highly discriminative features from tremendous amounts of face images. Many large scale face datasets exhibit long-tail distribution where a small number of entities (pers…

Cited by 512PDFScholar
2015

A Maximum Entropy Feature Descriptor for Age Invariant Face Recognition

CVPR 2015poster

In this paper, we propose a new approach to overcome the representation and matching problems in age invariant face recognition. First, a new maximum entropy feature descriptor (MEFD) is developed that encodes the microstructure of facial images into a set of discrete codes in terms of maximum entro…

Cited by 130SourcePDFScholar